CNNVD-202508-047 Information

Aug 01, 2025 cve

CNNVD ID

CNNVD-202508-047

CVE-2025-45767

CNNVD Published: 2025-08-01

Description (Chinese)

jose是Filip Skokan个人开发者的用于 JSON 对象签名和加密的 JavaScript 模块。 jose 6.0.10版本存在安全漏洞，该漏洞源于使用了弱加密技术。

Description (English)

jose is a JavaScript module for the signature and encryption of JSON objects by Filip Skokan personal developer. There is a security gap in version 6.0.10, which stems from the use of weak encryption.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-01

Last Modified

2026-02-24

References

https://github.com/panva/jose https://gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91d https://github.com/panva/jose/discussions/813 https://github.com/panva/jose/blob/1e36dd29e76511e06737e5d5d500d81e01a9c3d2/src/lib/check_key_length.ts#L6-L7 https://gist.github.com/ZupeiNie/705a606fbb99f3bb8c9b51e5bc13c91d?permalink_comment_id=5711572#gistcomment-5711572 https://nvd.nist.gov/vuln/detail/CVE-2025-45767 https://access.redhat.com/security/cve/cve-2025-45767

Patch

https://github.com/panva/jose/releases

Share on: